Bugtraq mailing list archives

Re: Linux kernels DoSable by file-max limit


From: Jim Breton <jamesb-bugtraq () alongtheway com>
Date: Wed, 10 Jul 2002 01:04:26 +0000

On Mon, Jul 08, 2002 at 09:30:34PM -0400, Michal Zalewski wrote:
And they can still most likely bypass your limit by putting something
smart in their .procmailrc / .forward / .qmail, or in so many other ways.

One could use 'initscript' to plug many of those holes:

INITSCRIPT(5)  Linux System Administrator's Manual  INITSCRIPT(5)

NAME
       initscript - script that executes inittab commands.

SYNOPSIS
       /bin/sh /etc/initscript id runlevels action process

       When  the  shell  script  /etc/initscript is present, init
       will use it to execute the commands  from  inittab.   This
       script  can  be  used  to set things like ulimit and umask
       default values for every process.


Current thread: